VulnerabilityModified

CVE-2016-0611

Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote authenticated users to affect availability via unknown vectors related to Optimizer.

MEDIUM 4.0EPSS 3.20%

Does this matter?

Lower severity and a low EPSS score (3.20%). Track it; it rarely justifies an emergency change on its own.

Description

Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote authenticated users to affect availability via unknown vectors related to Optimizer.

CVSS 2.0: 4.0 MEDIUMAV:N/AC:L/Au:S/C:N/I:N/A:P
EPSS: 3.20% probability · 87th percentile
CISA KEV: Not listed
Weakness: CWE-284
Affected: canonical/ubuntu linux · oracle/mysql · opensuse/leap · opensuse/opensuse · redhat/enterprise linux
Source: secalert_us@oracle.com

References

http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.htmlThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-0705.htmlThird Party Advisory
http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/81164Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1034708Third Party Advisory, VDB Entry
http://www.ubuntu.com/usn/USN-2881-1Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00015.htmlThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00016.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-0705.htmlThird Party Advisory
http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/81164Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1034708Third Party Advisory, VDB Entry
http://www.ubuntu.com/usn/USN-2881-1Third Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.